home

phBot.exe

phBot

Ryan Clouser

Publisher:
ProjectHax  (signed by Ryan Clouser)

Product:
phBot

Description:
phBot - Silkroad Online Bot

Version:
11.9.6.0

MD5:
a4820f0b33b4ae47476d057cf0ad69ff

SHA-1:
4c667dce71e3b15ce2f663460550e3a597423975

SHA-256:
029122b69f61831ab02c2e4ba5c751a0f988f0dc3d9fb3a38283a01c6c290952

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:30:43 AM UTC  (today)

File size:
20.1 MB (21,063,664 bytes)

Product version:
11.9.6.0

Copyright:
Copyright (C) 2015 ProjectHax

Original file name:
phBot.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Ryan Clouser

Authority:
StartCom Ltd.

Valid from:
11/8/2013 10:13:03 AM

Valid to:
11/8/2015 8:34:04 PM

Subject:
E=ryan@projecthax.com, CN=Ryan Clouser, L=Camp Hill, S=Pennsylvania, C=US, Description=GDbAxi2Z0A7Em5K7

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0BB8

File PE Metadata
Compilation timestamp:
7/28/2015 3:39:41 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
393216:Pvgw+AC36wUeUnlQvvtYmDUTt0hkB6wlqMH2GRV8G/5yTapaA76XMMPp6Xc4/bxl:PhbCqT9lQHtYwhxwlzH2GX/5yGpa5MMs

Entry address:
0x1F081EF

Entry point:
60, C7, 44, 24, 1C, 9C, 9B, 62, 31, 9C, C6, 44, 24, 04, C0, C7, 44, 24, 1C, C2, EC, CB, 4E, 60, 68, 53, 7A, 8F, 11, 8D, 64, 24, 40, E9, A3, 32, F4, 00, A4, 9E, 85, CC, E0, D4, 4C, 01, B7, 5A, 8F, 61, 9F, B2, 2C, 87, 16, 68, CF, 41, 87, FA, 7D, E7, 68, 3D, B4, DE, 71, DB, 16, 18, 07, 71, 54, 2C, D6, 37, FA, 83, 17, C7, 7D, FF, F8, EA, FA, 37, 73, B8, F8, A3, 61, F4, FC, E6, 2C, 98, 15, CF, 52, 9C, C7, C5, 20, 2E, B7, B4, 97, F9, 59, DF, 6E, 9B, 08, C7, CA, AE, 3F, B0, 89, 84, 43, E6, F6, 17, 86, E5, FF, 59...
 
[+]

Code size:
9.1 MB (9,524,736 bytes)

Scan phBot.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.